Security News

Java Serialization Bug Crops Up At PayPal (Threatpost)
2016-01-28 14:04

PayPal has rewarded two researchers with bug bounties for the discovery of a Java serialization vulnerability in manager.paypal.com

PayPal patches deadly server remote code execution flaw (The Register)
2016-01-27 08:57

Deserialization Bug in PayPal App Allowed Code Execution (SecurityWeek)
2016-01-27 07:42

PayPal Remote Code Execution Vulnerability using Java Deserialization (Reddit)
2016-01-25 14:27

New type of PayPal spam discovered (SC Magazine)
2016-01-19 16:26

Spamming Someone from PayPal (Schneier on Security)
2016-01-15 12:45

Troy Hunt has identified a new spam vector. PayPal allows someone to send someone else a $0 invoice. The spam is in the notes field. But it's a legitimate e-mail from PayPal, so it evades many of...

PayPal investigates account compromised twice in one day (SC Magazine)
2016-01-05 22:39

Brian Krebs criticises PayPals security as authentication flaws exposed (The Register)
2015-12-30 15:39

How PayPal could have easily avoided the last account hack of briankrebs (Reddit)
2015-12-29 23:08

PayPal Authentication Still Substandard (Schneier blog)
2015-12-29 18:38